Redact PDF Online: Permanently Remove Sensitive Info

TL;DR — True PDF redaction permanently deletes the underlying bytes (text, metadata, OCR layers) from the file, while a fake redaction only paints a black rectangle on top of still-extractable content. The wrong tool has cost law firms, governments and journalists millions in leaked settlements, exposed informants and disciplinary sanctions. Below are four methods (Adobe Acrobat Pro, iFillPDF, CLI with qpdf, and the GDPR/HIPAA compliance checklist) that guarantee true byte-level removal.

The fake-redaction trap (and the lawsuits it caused)

A fake redaction is any "black box" drawn on top of a PDF using an annotation tool, a shape, a highlighter set to black, or even a screenshot pasted over the text. The bytes underneath remain in the file. Anyone can copy-paste, run pdftotext, or open the document in a free editor to read what you tried to hide.

This has caused at least three documented disasters:

• Paul Manafort court filing (2018) — defense lawyers used black rectangles in Microsoft Word, exported to PDF, and journalists copy-pasted the "redacted" sections in 30 seconds, revealing collusion allegations Mueller was still investigating.
• Texas v. Apple antitrust filing (2024) — government attorneys redacted Apple's internal Slack messages with a cosmetic overlay; competitors extracted the text and the case strategy leaked to TechCrunch.
• Snowden NSA documents in The New York Times (2014) — a contractor name was hidden behind a black bar without flattening; a security researcher recovered the name within hours, putting an informant at risk.

The test is simple: open your "redacted" PDF, press Ctrl+A then Ctrl+C, paste into a text editor. If you see the supposedly hidden text, the redaction failed.

Method 1 — Adobe Acrobat Pro Redact (gold standard)

Adobe Acrobat Pro DC ($19.99/month, $239.88/year) is the reference implementation accepted by US federal courts, EDPB auditors and HIPAA covered entities. The Redact tool does three things in one pass: it deletes the marked text from the content stream, scrubs the document metadata (Sanitize Document), and removes hidden layers, comments and form field data.

Procedure:

1. Open the PDF in Acrobat Pro (not Reader — Reader has no redact tool).
2. Tools → Redact → Mark for Redaction → drag over the sensitive content. You can also use Find Text & Redact to pattern-match SSNs, credit cards, emails.
3. Click Apply — Acrobat warns you the action is irreversible.
4. Critical second step: Sanitize Document to strip metadata, JavaScript, embedded files and revision history. Without this, your author name, edit timestamps and previous versions stay in the file.
5. Save as a new file (never overwrite the original — keep an unredacted master in a secure vault).

Method 2 — iFillPDF / PDFescape / DocFly online redaction

For users who don't want to pay $240/year or install desktop software, browser-based redactors do the job — but only if they perform real byte deletion, not just rasterization. Here are the five tools serious legal and HR teams test against:

The OCR scrub column matters more than people realize. If your PDF was scanned (a signed NDA, a medical record), the text layer added by OCR sits invisibly behind the image. Redacting only the visible image leaves the OCR text intact and copyable. iFillPDF and Acrobat Pro are the only options on this list that strip both layers automatically.

Method 3 — qpdf + sed (CLI for advanced users)

For automation pipelines and bulk redaction, the open-source qpdf library combined with sed gives you reproducible, scriptable redaction:

qpdf --qdf --object-streams=disable input.pdf uncompressed.pdf
sed -i 's/CONFIDENTIAL_TERM/XXXXXXXXX/g' uncompressed.pdf
qpdf --linearize uncompressed.pdf redacted.pdf
rm uncompressed.pdf

Danger: this technique only works for direct text strings in non-encrypted PDFs. It will NOT redact text inside compressed streams, form fields, embedded fonts with custom encoding, or scanned images. Always verify with pdftotext redacted.pdf - | grep CONFIDENTIAL_TERM — if grep returns anything, redo with a real tool. For court filings, never rely solely on CLI; use Acrobat Pro or iFillPDF redact as the source of truth.

Compliance angle: GDPR, HIPAA, attorney-client privilege

Redaction failures are not just embarrassing — they trigger statutory penalties.

• GDPR Article 5(1)(f) requires "appropriate security" for personal data. The EDPB has fined controllers €1.5M+ for "pseudo-redaction" that left names extractable (Greek DPA, 2023).
• HIPAA 45 CFR §164.514(a) Safe Harbor requires removal of 18 specific identifiers; CMS has issued breach notices when covered entities published "redacted" PDFs with extractable PHI.
• Attorney-client privilege — California State Bar opinion 2020-203 holds that a lawyer who produces a fake-redacted document waives privilege over the disclosed content; courts have refused to "claw back" leaked privileged material.

FAQ

Is black box redaction safe? No. A black rectangle drawn as an annotation, shape or highlighter is purely visual. The text underneath stays in the file and is recoverable in seconds with copy-paste, pdftotext, or any free PDF editor. Use a true-redaction tool that deletes the bytes.

Does Adobe Reader free have redact? No. Only Adobe Acrobat Pro DC (paid) includes the Redact tool. Reader can view redacted PDFs but cannot create them. Free alternatives that perform true redaction include iFillPDF, iLovePDF and PDF24.

Free vs paid redaction tools — which to pick? For occasional personal use (1-5 documents), free browser tools like iFillPDF or iLovePDF are sufficient — they perform real byte deletion. For regulated industries (legal, healthcare, finance) producing 50+ documents per month with audit requirements, Acrobat Pro is the safer choice because of its Sanitize Document step and court-accepted reputation.

Can a redacted PDF be unredacted? A truly redacted PDF (bytes deleted) cannot be reversed — the information is gone. A cosmetically "redacted" PDF (black box overlay) can be unredacted instantly by anyone who opens it. This is why verification with pdftotext or copy-paste is mandatory before publishing.

Does redaction remove the OCR text layer? Only if your tool explicitly handles OCR. Scanned PDFs often have a hidden text layer added by OCR software that sits invisibly behind the image. Painting over the visible image leaves the OCR text intact. iFillPDF and Acrobat Pro strip both layers; many free tools strip only the visible content.

Redact your first PDF — no signup, true byte deletion

Stop trusting black rectangles. Open the iFillPDF Redact tool, drop your PDF, mark the sensitive content, and download a file with the underlying bytes deleted, the OCR layer scrubbed, and the metadata sanitized. Processing happens client-side on EU infrastructure (Frankfurt), and your first redaction needs no account.

Need to combine workflows? After redacting, use Fill PDF to complete the redacted form, Sign PDF to add a legal signature, or Compress PDF to shrink the final file before email.